$ rpki-client -vvf repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft File: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft (raw, json) Hash identifier: Bha0LbjqQEnhNqpgykd17KyXL3BNqIPc835518o8D+Q= Subject key identifier: 3D:C2:2D:68:46:E4:23:4A:8C:24:93:C6:FD:ED:B8:D4:BE:2E:65:44 Authority key identifier: 70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 Certificate issuer: /CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Certificate serial: 70A274852CA51272D680DADE7F0A43FA5B678FDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft Manifest number: AC Signing time: Thu 16 Apr 2026 08:11:39 +0000 Manifest this update: Thu 16 Apr 2026 08:06:39 +0000 Manifest next update: Sun 19 Apr 2026 18:13:39 +0000 Files and hashes: 1: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl (hash: pi6zZYfk8lteyXIFL97LIv7wWXseoP2XACSnzwaFCGg=) 2: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: VidmqV5KOOIREROYSPySP7eHkVc3r+Gz/C3O6lmsJ00=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 18:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:a2:74:85:2c:a5:12:72:d6:80:da:de:7f:0a:43:fa:5b:67:8f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Validity Not Before: Apr 16 08:06:39 2026 GMT Not After : Apr 19 18:13:39 2026 GMT Subject: CN=3DC22D6846E4234A8C2493C6FDEDB8D4BE2E6544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:19:0d:d1:d6:56:38:29:80:43:56:af:33:db: 44:d8:d5:96:16:ca:d1:2a:62:95:ca:56:a6:d2:65: 0d:5e:d2:cf:86:8a:fb:2c:b1:65:91:c6:17:0a:c1: c8:7d:ea:f5:56:be:d9:ec:2e:40:ef:13:a8:72:c1: 22:1d:22:64:85:69:5a:d3:3c:2f:da:af:94:ac:ae: 00:c9:65:5e:33:09:71:9b:8b:f1:95:e6:d2:c0:ea: 91:d4:a6:a9:d5:7b:e6:74:4c:ff:3e:55:05:b2:aa: 35:7a:b3:87:7b:45:bd:e1:c7:33:f3:d1:20:88:82: 23:c1:93:ae:4b:30:f9:fc:f4:11:c5:79:fa:a2:d9: 32:7f:ce:4b:ec:a4:63:d5:44:40:ff:70:d8:65:91: a9:2a:fd:e6:8a:77:91:3d:06:be:a3:2a:ad:59:3c: fe:17:32:45:8e:cb:ac:52:4f:04:8e:19:ae:be:b1: 4a:e9:6f:e6:51:ff:14:3b:b1:86:53:97:db:14:c7: 13:51:d9:50:b7:ef:53:58:a7:f8:0c:52:d8:57:2c: 50:7c:bb:20:e4:31:76:f8:da:1b:1f:5c:18:90:6f: 32:cc:d3:09:83:54:83:2a:90:3b:a3:75:ba:37:33: db:fa:08:9a:86:0c:1b:b5:65:1c:fb:b7:74:90:62: 3f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C2:2D:68:46:E4:23:4A:8C:24:93:C6:FD:ED:B8:D4:BE:2E:65:44 X509v3 Authority Key Identifier: keyid:70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:0d:85:dd:8f:57:42:c1:fa:74:1b:ef:2d:cc:77:9b:64:f7: 33:24:6b:f9:3c:41:4b:f2:b4:43:95:2a:30:dd:0d:ab:3c:59: 6a:c2:a6:6c:bc:bb:62:37:42:dd:66:90:eb:ac:95:1b:a8:a1: e7:90:6f:6b:1b:c7:dc:d6:aa:a3:76:a6:e2:d6:f9:c4:56:19: ff:4e:58:e9:23:c4:37:c7:f6:b7:67:d5:84:c8:2d:e2:99:0d: b6:39:68:a3:3d:94:fe:a5:8a:db:12:4f:af:91:80:7c:39:a1: 02:0e:c3:06:c1:39:b9:43:88:c1:64:ed:51:ee:82:ff:bc:31: cc:c0:c5:dc:fa:79:0b:8d:81:17:1b:f4:b1:69:56:49:b3:53: a6:e8:72:df:f5:ea:a7:b5:b2:01:e9:12:f3:df:82:47:cf:ac: 63:53:0a:46:95:63:14:16:4e:a0:e0:3a:5b:2c:e1:29:1d:93: 4a:e4:c6:6d:e2:c6:a6:cb:1d:65:b0:f1:04:f2:ad:8d:d7:78: d5:01:7e:c4:d3:6b:4f:6d:3c:72:d6:d8:c8:64:e6:8b:d0:98: 5e:a8:4d:4b:07:ea:87:e1:e6:aa:f4:43:16:22:62:d5:32:9d: ee:af:bd:c6:f0:03:c9:28:ba:03:22:14:0f:bf:46:46:f8:57: d8:27:d2:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcKJ0hSylEnLWgNrefwpD+ltnj90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZD RTU3MUI0MjAeFw0yNjA0MTYwODA2MzlaFw0yNjA0MTkxODEzMzlaMDMxMTAvBgNV BAMTKDNEQzIyRDY4NDZFNDIzNEE4QzI0OTNDNkZERURCOEQ0QkUyRTY1NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4GQ3R1lY4KYBDVq8z20TY1ZYW ytEqYpXKVqbSZQ1e0s+GivsssWWRxhcKwch96vVWvtnsLkDvE6hywSIdImSFaVrT PC/ar5SsrgDJZV4zCXGbi/GV5tLA6pHUpqnVe+Z0TP8+VQWyqjV6s4d7Rb3hxzPz 0SCIgiPBk65LMPn89BHFefqi2TJ/zkvspGPVRED/cNhlkakq/eaKd5E9Br6jKq1Z PP4XMkWOy6xSTwSOGa6+sUrpb+ZR/xQ7sYZTl9sUxxNR2VC371NYp/gMUthXLFB8 uyDkMXb42hsfXBiQbzLM0wmDVIMqkDujdbo3M9v6CJqGDBu1ZRz7t3SQYj+FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPcItaEbkI0qMJJPG/e241L4uZUQwHwYDVR0j BBgwFoAUcDO4wNxqgOXMRoa5O6OTr85XG0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDYyMTExZC0wYTEzLTQ0MDctYWYzMy0zNGMyMmE5ZDdhZWMvMC83MDMzQjhDMERD NkE4MEU1Q0M0Njg2QjkzQkEzOTNBRkNFNTcxQjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZDRTU3 MUI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA2MjExMWQtMGExMy00NDA3LWFm MzMtMzRjMjJhOWQ3YWVjLzAvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkz QUZDRTU3MUI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUNhd2PV0LB+nQb7y3Md5tk9zMka/k8QUvy tEOVKjDdDas8WWrCpmy8u2I3Qt1mkOuslRuooeeQb2sbx9zWqqN2puLW+cRWGf9O WOkjxDfH9rdn1YTILeKZDbY5aKM9lP6litsST6+RgHw5oQIOwwbBOblDiMFk7VHu gv+8MczAxdz6eQuNgRcb9LFpVkmzU6boct/16qe1sgHpEvPfgkfPrGNTCkaVYxQW TqDgOlss4Skdk0rkxm3ixqbLHWWw8QTyrY3XeNUBfsTTa09tPHLW2Mhk5ovQmF6o TUsH6ofh5qr0QxYiYtUyne6vvcbwA8kougMiFA+/Rkb4V9gn0tA= -----END CERTIFICATE-----Generated at Sat Apr 18 16:06:45 2026 by rpki-client